Context governance
for autonomous AI agents

from autopil import ContextGuard, SensitivityLevel

guard = ContextGuard(
    policy_path="policies/",
    audit_db="autopil.db",
)

@guard.protect(
    agent_role="loan_underwriter",
    user_id="user_001",
    source_id="credit_scores",
    sensitivity_level=SensitivityLevel.HIGH,
    session_id=session_id,
)
def get_credit_score(customer_id: str) -> dict:
    return credit_db.query(customer_id)

# ALLOW — policy matched, audit event logged, OTEL span emitted
score = get_credit_score("cust_abc")

# DENY — raises PermissionError, denial logged, alert rules checked
# source='executive_comms' is on the denylist for this role

# Add to your agent's system prompt:
Before accessing any data source, call evaluate_context:
  agent_role: loan_underwriter
  user_id: <current user>
  source_id: <data source you want>
  sensitivity_level: high
  session_id: <conversation id>

Only proceed if decision is ALLOW.
After retrieval, call record_action with the event_id.

curl -X POST http://localhost:8000/v1/context/evaluate \
  -H "X-API-Key: apl_yourkey" \
  -H "Content-Type: application/json" \
  -d '{
    "agent_role":        "loan_underwriter",
    "user_id":           "user_001",
    "source_id":         "credit_scores",
    "sensitivity_level": "high",
    "session_id":        "sess_abc123",
    "task_type":         "credit_decision"
  }'

from fastapi import FastAPI
from autopil.middleware import AutoPILMiddleware, RouteRule
from autopil import ContextGuard, SensitivityLevel

guard = ContextGuard(policy_path="policies/")

app = FastAPI()
app.add_middleware(
    AutoPILMiddleware,
    guard=guard,
    rules=[
        RouteRule(
            path_pattern=r"^/api/credit/.*",
            agent_role="loan_underwriter",
            user_id_header="X-User-ID",
            source_id="credit_scores",
            sensitivity_level=SensitivityLevel.HIGH,
        ),
    ],
)

from autopil.langchain_guard import LangChainGuard
from langchain_core.tools import tool

guard = LangChainGuard(policy_path="policies/")

@tool
@guard.protect(
    agent_role="research_analyst",
    user_id="user_001",
    source_id="market_data",
    sensitivity_level=SensitivityLevel.MEDIUM,
    session_id=session_id,
)
def get_market_data(ticker: str) -> dict:
    return data_api.fetch(ticker)

from autopil.llamaindex_guard import LlamaIndexGuard
from llama_index.core.tools import FunctionTool

guard = LlamaIndexGuard(policy_path="policies/")

@guard.protect(
    agent_role="document_analyst",
    user_id="user_001",
    source_id="legal_contracts",
    sensitivity_level=SensitivityLevel.HIGH,
    session_id=session_id,
)
def retrieve_contract(clause: str) -> str:
    return index.as_query_engine().query(clause)

tool = FunctionTool.from_defaults(fn=retrieve_contract)

from autopil.gemini_guard import GeminiGuard
import google.generativeai as genai

guard = GeminiGuard(policy_path="policies/")

@guard.protect(
    agent_role="portfolio_advisor",
    user_id="user_001",
    source_id="portfolio_data",
    sensitivity_level=SensitivityLevel.HIGH,
    session_id=session_id,
)
def get_portfolio(client_id: str) -> dict:
    return wealth_db.query(client_id)

model = genai.GenerativeModel("gemini-1.5-pro")

from autopil.openai_agents_guard import OpenAIAgentsGuard
from agents import function_tool

guard = OpenAIAgentsGuard(policy_path="policies/")

@function_tool
@guard.protect(
    agent_role="claims_adjuster",
    user_id="user_001",
    source_id="claims_data",
    sensitivity_level=SensitivityLevel.HIGH,
    session_id=session_id,
)
def get_claim(claim_id: str) -> dict:
    return claims_db.fetch(claim_id)

import boto3
from autopil.bedrock_guard import BedrockGuard

guard = BedrockGuard(policy_path="policies/")
boto_client = boto3.client("bedrock-agent-runtime")

client = guard.wrap_invoke_agent(
    boto_client,
    agent_role="compliance_agent",
    user_id="user_001",
    source_id="regulatory_data",
    sensitivity_level=SensitivityLevel.HIGH,
    session_id=session_id,
)

response = client.invoke_agent(
    agentId="ABCDEF123",
    agentAliasId="TSTALIASID",
    sessionId=session_id,
    inputText="Summarize Q1 compliance filings",
)